Our Commitment to Privacy The Kidney Foundation of Canada (“The Foundation”) is committed to protecting the privacy of its employees, members, stakeholders and those we serve. We value the trust placed in us by the Canadian public and recognize that maintaining this trust requires that we be transparent and accountable in how we treat the information that has been given to us. This Privacy Policy is a statement of principles and guidelines concerning the protection of personal information entrusted to us.

Personal Information the Foundation Collects Canadian privacy legislation defines “personal information” broadly as information about an identifiable individual or as information that allows an individual to be identified. For the purposes of this policy, personal information means information about an identifiable individual as defined from time to time in applicable privacy legislation. Generally speaking, personal information does not include what is considered business contact information: name, title or position, business address, telephone number, facsimile number or e-mail address.

The Foundation gathers and uses personal information for the following purposes:

To occasionally exchange direct mail lists with other charities to reduce costs

For any other purpose to which consent is given

The Foundation’s Privacy Practices The Foundation shall in all respects comply with applicable privacy legislation. The Foundation’s privacy practices are designed to achieve this. Therefore, in the course of collecting, using and storing personal information, the Foundation will ensure that:

Consent to the collection, use, retention and disclosure of personal information must always exist. In obtaining consent, the purpose(s) for the collection, use and/or disclosure will be obvious by the very nature of the transaction or, will be as described in this policy or will be stated either at the time or before the information is collected. Consent can be either express or implied and can be provided directly by the individual or by an authorized representative. Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from an individual’s action or inaction.

Any further use of this information is subject to consent, and the Foundation routinely offers individuals the opportunity to opt not to have their information used for purposes beyond those for which it was explicitly collected.

Information will be carefully protected from inappropriate or unauthorized use.

Internally, access to personal information is based only on the need to deal with the information for the reason(s) for which it was collected.

Personal information is stored in secured locations and on servers controlled by The Foundation or at the offices of our service providers. Specific safeguards (physical, organizational and technological) are in place to ensure that the information is not shared or disclosed more widely than is necessary to achieve the purpose(s) for which it was collected.

Measures are taken to ensure that the integrity of this information is maintained.

Personal information is retained only for as long as is necessary to fulfill the purpose(s) for which it was collected and to meet specific legal obligations. When personal information is no longer needed (relating to the reason(s) for which it was collected), it will be appropriately destroyed.

Individuals have the right to access their personal information, which the Foundation has on file and to challenge its accuracy, if necessary.

From time to time, the Foundation may disclose personal information to:

1. Service providers, including an organization or individual retained by The Foundation to perform functions on its behalf (e.g. data processing, office/professional services, document management, bulk mailings, etc.) 2. Volunteers/staff who act as adjudicators on behalf of the Foundation in the assessment of applications for funding or to assess applications to volunteer. 3. Other charitable organizations, with consent. 4. Any third party or parties, where consent to such disclosure is provided or where disclosure is required or permitted by law.

Where personal information is transferred to outside service providers, all reasonable steps will be taken to ensure that any such provider has personal information procedures and policies in place that are at least comparable to those of the Foundation.

When a visit is made to our website, our web server automatically logs (records) domain name and standard information about the operating system and web browser being used, as provided by the web browser. This information is used for statistical purposes to help us manage our site; it does not identify an individual in any way. We use cookies and other technologies to keep track of your interactions on our website to offer a personalized experience, and to help improve our website for future visits. Our website may contain links to other websites, which are provided as a convenience only. Third party websites may have different privacy policies and practices than The Foundation, and The Foundation has no responsibility for such third party websites.

Changes to Privacy PolicyThe Foundation reserves the right to modify or supplement this privacy policy at any time.

Access to Information / Inquiry / Complaint Process Any person whose personal information is held by the Foundation has:

the right to know of the existence of such personal information and to have access to that information to ensure that it is accurate, and

the right to complain if that personal information is improperly collected, used, stored or disclosed.

A Local Privacy Officer is available at each Branch and the National Office of the Foundation to administer this Policy and related procedures, and to deal with requests for access to information.

Complaints and/or inquiries pertaining to the Foundation’s Privacy Policy or procedures can be directed to Teresa Havill, Chief Privacy Officer at privacy@kidney.ca.